Set up checkout and Go in release trigger guard

Agent-Logs-Url: https://github.com/jeduden/mdsmith/sessions/4731b4af-8f5d-49e7-8146-61f9e9704c44

Co-authored-by: jeduden <1117699+jeduden@users.noreply.github.com>

Author: Copilot

.github/workflows/release.yml

@@ -35,6 +35,13 @@ jobs:
       should_run: ${{ steps.decide.outputs.should_run }}
       create_release_is_draft: ${{ steps.decide.outputs.create_release_is_draft }}
     steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
+        with:
+          go-version-file: go.mod
+          cache: false
       - name: Decide whether this trigger should publish
         id: decide
         env: